NetSight
critical9.8

CVE-2025-45890

Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter

Impact

Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter

Affected products

VendorProductAffected versions
XxyopenNovel-Plus
before 5.1.0

Weakness classification

References